write-gatekeeper
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- Security-Centric Architecture: The skill outlines a 'Gatekeeper' pattern for Cloudflare Workers that mediates access between gadgets and external services using a capability-based security model.
- Mandatory Observation Logging: It enforces the use of an
ApprovalQueueAPI to log all agent-mediated observations and actions, ensuring a transparent audit trail for end users. - Access Control Verification: The implementation of
verifyObserverAccessensures that data shared with collaborators is verified against the observer's own credentials, preventing unauthorized exposure. - Action Approval Workflow: Side-effect operations require explicit submission and application through an approval queue, preventing automated systems from performing unverified modifications to external services.
- Safe Credential Management: The provided template uses Durable Objects for secure per-user token storage and implements timing-safe nonce verification for authentication flows.
Audit Metadata